ledger

type AuthConfig struct {
	ClientID     string `yaml:"client_id" validate:"required"`
	ClientSecret string `yaml:"client_secret" validate:"required"`
	Audience     string `yaml:"audience" validate:"required"`
	TokenURL     string `yaml:"token_url" validate:"required"`

	// ExpiryLeeway specifies how long before actual token expiry
	// the token should be considered expired. If zero, a default is applied.
	ExpiryLeeway time.Duration `yaml:"expiry_leeway" default:"60s"`
}

type AuthProvider interface {
	// Token returns a valid access token and its expiry time.
	// Implementations must cache and refresh tokens as needed.
	Token(ctx context.Context) (token string, expiry time.Time, err error)
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	RPCURL         string `yaml:"rpc_url" validate:"required"`
	LedgerID       string `yaml:"ledger_id" default:""`
	MaxMessageSize int    `yaml:"max_inbound_message_size" default:"52428800"`

	TLS  *TLSConfig  `yaml:"tls" validate:"required"`
	Auth *AuthConfig `yaml:"auth" validate:"required"`
}

type Ledger interface {
	// AuthContext attaches authorization metadata to the given context.
	AuthContext(ctx context.Context) context.Context

	// InvalidateToken invalidates the token.
	InvalidateToken()

	// JWTSubject returns the JWT subject ("sub") from the current access token.
	JWTSubject(ctx context.Context) (string, error)

	// State returns the Ledger API StateService client.
	State() lapiv2.StateServiceClient

	// Command returns the Ledger API CommandService client.
	Command() lapiv2.CommandServiceClient

	// Update returns the Ledger API UpdateService client.
	Update() lapiv2.UpdateServiceClient

	// PartyAdmin returns the PartyManagementService client.
	PartyAdmin() adminv2.PartyManagementServiceClient

	// UserAdmin returns the UserManagementService client.
	UserAdmin() adminv2.UserManagementServiceClient

	// Interactive returns the InteractiveSubmissionService client
	// for prepare/sign/execute transaction flows with external parties.
	Interactive() interactivev2.InteractiveSubmissionServiceClient

	// GetLedgerEnd retrieves the current absolute ledger offset.
	GetLedgerEnd(ctx context.Context) (int64, error)

	// GetActiveContractsByTemplate retrieves active contracts filtered
	// by template identifier and visible parties at the given offset.
	GetActiveContractsByTemplate(
		ctx context.Context,
		activeAtOffset int64,
		parties []string,
		templateID *lapiv2.Identifier,
	) ([]*lapiv2.CreatedEvent, error)

	// GetActiveContractsByInterface retrieves active contracts filtered
	// by interface identifier and visible parties at the given offset.
	GetActiveContractsByInterface(
		ctx context.Context,
		activeAtOffset int64,
		parties []string,
		interfaceID *lapiv2.Identifier,
	) ([]*lapiv2.CreatedEvent, error)

	// Conn returns the underlying gRPC client connection.
	Conn() *grpc.ClientConn

	// Close closes the underlying gRPC connection.
	Close() error
}

type OAuthClientCredentialsProvider struct {
	// contains filtered or unexported fields
}

type Option func(*settings)

type TLSConfig struct {
	Enabled            bool   `yaml:"enabled" default:"false"`
	CertFile           string `yaml:"cert_file" default:""`
	KeyFile            string `yaml:"key_file" default:""`
	CAFile             string `yaml:"ca_file" default:""`
	InsecureSkipVerify bool   `yaml:"insecure_skip_verify" default:"false"`
}